Amendments to the Claims: 



Listing of Claims: 

1. (Currently Amended) A method for management of a distributed data processing system, 
the method comprising: 

determining a unique network hardware identifier for a network device; 

associating the unique network hardware identifier with geographic location information; 

and 

configuring the network device in accordance with the geographic location information 
through a network administrative user interface generating security settings that apply to the 
network device using the unique network hardware identifier and the geographic location 
information, wherein the security settings include access to the network device for users that are 
allowed to access the distributed data processing system at a geographic location in the 
geographic location information; 

applying the security settings to the network device . 

2. (Original) The method of claim 1 wherein the unique network hardware identifier is a 
MAC (Media Access Control) address. 

3. (Original) The method of claim 1 further comprising: 

authorizing user access to the network device based on a user security parameter 
corresponding to the geographic location information. 

4. (Original) The method of claim 1 further comprising: 

generating a unique name for an endpoint resource on the network device, wherein the 
unique name comprises the geographic location information. 

5. (Original) The method of claim 4 further comprising: 

associating the unique name with security attributes for the endpoint resource. 
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6. (Original) The method of claim 4 further comprising: 

associating the unique name for the endpoint resource with the unique network hardware 
identifier. 

7. (Original) The method of claim 4 further comprising: 
determining a router closest to the endpoint resource; 

retrieving router geographic location information associated with the router; and 
using the router geographic location information in the generated unique name for the 
endpoint resource. 

8. (Previously Presented) The method of claim 4 further comprising: 
determining a network address generator (NAG) for the endpoint resource; 
retrieving NAG geographic location information associated with the NAG; and 
using the NAG geographic location information in the generated unique name for the 

endpoint resource. 

9. (Original) The method of claim 8 wherein the network address generator is a server 
operating in accordance with a DHCP (Dynamic Host Configuration Protocol) protocol. 

10. (Original) The method of claim 1 further comprising: 

detecting a change of location of the network device within the distributed data 
processing system based on the geographic location information. 

1 1 . (Original) The method of claim 10 further comprising: 

reconfiguring the network device based on the detected change of location of the network 

device. 

12. (Original) The method of claim 10 further comprising: 

reconfiguring user security parameters based on the detected change of location of the 
network device. 
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13. (Original) The method of claim 1 further comprising: 

representing the distributed data processing system as a set of scopes, wherein a scope 
comprises a logical organization of network-related objects; 

associating each scope with a management customer, wherein each scope is uniquely 
assigned to a management customer, wherein each scope is uniquely associated with a set of 
configuration parameters for managing each scope; 

managing the distributed data processing system as a set of logical networks, wherein a 
logical network comprises a set of scopes, and wherein each logical network is uniquely assigned 
to a management customer; and 

allowing an administrative user to dynamically reconfigure logical networks within the 
distributed data processing system. 

14. (Original) The method of claim 1 further comprising: 

dynamically discovering endpoints, systems, and networks within the distributed data 
processing system; 

correspondingly representing endpoints, systems, and networks within the distributed 
data processing system as a set of endpoint objects, system objects, and network objects; and 

logically organizing the endpoint objects, system objects, and network objects within a 
set of scopes, wherein each endpoint object, each system object, and each network object is 
uniquely assigned to a scope such that scopes do not logically overlap. 

15. (Withdrawn) A method for distributing software, the method comprising: 
associating geographic location information with network devices in a distributed data 

processing system; 

determining to perform a software distribution operation; and 

in response to the determination to perform the software distribution operation, 

distributing a first software module to network devices in a first set of network devices in 

accordance with the geographic location information associated with the network devices in the 

first set of network devices. 
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16. (Withdrawn) The method of claim 15 further comprising: 

in response to the determination to perform the software distribution operation, 
distributing a second software module to network devices in a second set of network devices in 
accordance with the geographic location information associated with the network devices in the 
second set of network devices. 

17. (Withdrawn) The method of claim 15 further comprising: 

determining the geographic location information in conjunction with a DHCP (Dynamic 
Host Configuration Protocol) operation. 

18. (Currently Amended) An apparatus for management of a distributed data processing 
system, the apparatus comprising: 

means for determining a unique network hardware identifier for a network device; 
means for associating the unique network hardware identifier with geographic location 
information; and 

means for configuring the network device in accordance with the geographic location 
information through a network administrative user interface generating security settings that 
apply to the network device using the unique network hardware identifier and the geographic 
location information, wherein the security settings include access to the network device for users 
that are allowed to access the distributed data processing system at a geographic location in the 
geographic location information; 

means for applying the security settings to the network device . 

19. (Original) The apparatus of claim 18 wherein the unique network hardware identifier is a 
MAC (Media Access Control) address. 

20. (Original) The apparatus of claim 18 further comprising: 

means for authorizing user access to the network device based on a user security 
parameter corresponding to the geographic location information. 
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21. (Original) The apparatus of claim 18 further comprising: 

means for generating a unique name for an endpoint resource on the network device, 
wherein the unique name comprises the geographic location information. 

22. (Original) The apparatus of claim 21 further comprising: 

means for associating the unique name with security attributes for the endpoint resource. 

23. (Original) The apparatus of claim 21 further comprising: 

means for associating the unique name for the endpoint resource with the unique network 
hardware identifier. 

24. (Original) The apparatus of claim 21 further comprising: 
means for determining a router closest to the endpoint resource; 

means for retrieving router geographic location information associated with the router; 

and 

means for using the router geographic location information in the generated unique name 
for the endpoint resource. 

25. (Previously Presented) The apparatus of claim 21 further comprising: 

means for determining a network address generator (NAG) for the endpoint resource; 
means for retrieving NAG geographic location information associated with the NAG; and 
means for using the NAG geographic location information in the generated unique name 
for the endpoint resource. 

26. (Original) The apparatus of claim 25 wherein the network address generator is a server 
operating in accordance with a DHCP (Dynamic Host Configuration Protocol) protocol. 

27. (Original) The apparatus of claim 18 further comprising: 

means for detecting a change of location of the network device within the distributed data 
processing system based on the geographic location information. 
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28. (Original) The apparatus of claim 27 further comprising: 

means for reconfiguring the network device based on the detected change of location of 
the network device. 

29. (Original) The apparatus of claim 27 further comprising: 

means for reconfiguring user security parameters based on the detected change of 
location of the network device. 

30. (Original) The apparatus of claim 18 further comprising: 

means for representing the distributed data processing system as a set of scopes, wherein 
a scope comprises a logical organization of network-related objects; 

means for associating each scope with a management customer, wherein each scope is 
uniquely assigned to a management customer, wherein each scope is uniquely associated with a 
set of configuration parameters for managing each scope; 

means for managing the distributed data processing system as a set of logical networks, 
wherein a logical network comprises a set of scopes, and wherein each logical network is 
uniquely assigned to a management customer; and 

means for allowing an administrative user to dynamically reconfigure logical networks 
within the distributed data processing system. 

31. (Original) The apparatus of claim 18 further comprising: 

means for dynamically discovering endpoints, systems, and networks within the 
distributed data processing system; 

means for correspondingly representing endpoints, systems, and networks within the 
distributed data processing system as a set of endpoint objects, system objects, and network 
objects; and 

means for logically organizing the endpoint objects, system objects, and network objects 
within a set of scopes, wherein each endpoint object, each system object, and each network 
object is uniquely assigned to a scope such that scopes do not logically overlap. 
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32. (Withdrawn) An apparatus for distributing software, the apparatus comprising: 
means for associating geographic location information with network devices in a 

distributed data processing system; 

means for determining to perform a software distribution operation; and 

means for distributing a first software module to network devices in a first set of network 

devices in accordance with the geographic location information associated with the network 

devices in the first set of network devices in response to the determination to perform the 

software distribution operation. 

33. (Withdrawn) The apparatus of claim 32 further comprising: 

means for distributing a second software module to network devices in a second set of 
network devices in accordance with the geographic location information associated with the 
network devices in the second set of network devices in response to the determination to perform 
the software distribution operation. 

34. (Withdrawn) The apparatus of claim 32 further comprising: 

means for determining the geographic location information in conjunction with a DHCP 
(Dynamic Host Configuration Protocol) operation. 

35. (Original) A computer program product in a computer readable medium for use in 
managing a distributed data processing system, the computer program product comprising: 

instructions for determining a unique network hardware identifier for a network device; 

instructions for associating the unique network hardware identifier with geographic 
location information; and 

instructions for configuring the network device in accordance with the geographic 
location information through a network administrative user interface. 

36. (Original) The computer program product of claim 35 wherein the unique network 
hardware identifier is a MAC (Media Access Control) address. 
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37. (Original) The computer program product of claim 35 further comprising: 
instructions for authorizing user access to the network device based on a user security 

parameter corresponding to the geographic location information. 

38. (Withdrawn) A computer program product in a computer readable medium for use in 
managing a distributed data processing system, the computer program product comprising: 

instructions for associating geographic location information with network devices in a 

distributed data processing system; 

instructions for determining to perform a software distribution operation; and 
instructions for distributing a first software module to network devices in a first set of 

network devices in accordance with the geographic location information associated with the 

network devices in the first set of network devices in response to the determination to perform 

the software distribution operation. 

39. (Withdrawn) The computer program product of claim 38 further comprising: 
instructions for distributing a second software module to network devices in a second set 

of network devices in accordance with the geographic location information associated with the 
network devices in the second set of network devices in response to the determination to perform 
the software distribution operation. 

40. (Withdrawn) The computer program product of claim 38 further comprising: 
instructions for determining the geographic location information in conjunction with a 

DHCP (Dynamic Host Configuration Protocol) operation. 
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